This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft File: NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft (raw, json) Hash identifier: SCG/E950JU9laIOG/u5M78TNUyc8XK3f+HFodQkGfuk= Subject key identifier: 66:1B:FC:15:B7:05:8B:6E:C7:60:A5:D3:DE:70:1F:25:D2:50:B5:A2 Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4 Certificate issuer: /CN=355608d078d6f31cf79be78736bf884606a17da4 Certificate serial: 019AF50AB1E6BDF2B9A4C5EA948C8E3FB9EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:50 +0000 Manifest this update: Sat 06 Dec 2025 19:01:50 +0000 Manifest next update: Sun 07 Dec 2025 19:01:50 +0000 Files and hashes: 1: Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa (hash: +iXd1M4+bcqd1pD4b5qHzxAyt89KMtB2DGWb5orKRYY=) 2: NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl (hash: /zhzFld1XxzzZESrLf1v3t6hlyiKIQR0yOfKdRbW+7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:b1:e6:bd:f2:b9:a4:c5:ea:94:8c:8e:3f:b9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4 Validity Not Before: Dec 6 19:01:50 2025 GMT Not After : Dec 7 19:01:50 2025 GMT Subject: CN=661bfc15b7058b6ec760a5d3de701f25d250b5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:73:1b:e0:4a:d7:cb:4a:54:e2:10:59:c5: 04:91:88:fc:04:07:15:e2:1c:df:6d:17:3a:32:e0: 70:87:ef:9d:ed:64:76:be:76:1d:9b:68:ad:92:4b: 15:e1:b9:ba:28:70:36:b3:3f:e6:93:96:ba:79:ed: 3e:1a:e5:e1:d8:87:d3:2c:86:37:1e:ba:90:1a:96: f1:32:79:d0:d6:5e:1f:00:b9:61:a7:29:57:dd:00: 6e:40:6c:8e:1e:e4:6c:a0:5c:c1:53:72:c7:a2:0c: b3:96:61:5a:70:71:f8:66:ca:0a:5a:17:ff:0d:59: cc:e8:49:9d:82:3e:34:1b:d8:2e:dc:6b:08:75:08: ef:c7:7b:3c:9c:93:e5:2e:be:05:7d:ca:bd:81:7d: d2:e5:1e:f7:48:a1:34:33:1c:f8:ec:58:d6:e7:ab: 79:e2:18:bd:00:08:92:23:d1:64:64:f7:a8:2d:85: f2:71:a9:f0:d8:51:fd:4a:54:05:e8:56:4f:07:28: 01:39:6d:1d:1f:20:d4:ba:e8:66:44:87:8f:0b:d0: b3:46:8e:79:bb:f4:9b:32:d0:66:18:26:b3:d1:9c: e4:ea:88:70:9e:bd:53:f5:36:91:4b:1a:d6:14:f9: 4f:3a:51:59:30:78:39:78:aa:d9:f3:0d:eb:f0:30: 4e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1B:FC:15:B7:05:8B:6E:C7:60:A5:D3:DE:70:1F:25:D2:50:B5:A2 X509v3 Authority Key Identifier: keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:85:ca:cd:94:8d:97:ba:4a:ac:1c:8a:a5:13:89:4e:1e:87: bc:7d:4f:ee:68:79:18:13:9f:72:f7:90:5e:5d:2e:05:56:75: 3f:52:1d:46:f5:e3:28:18:1f:b7:db:8d:13:d8:9b:3d:6a:bf: 38:cf:a4:2a:8b:6f:8b:55:c7:08:3f:ce:6d:ff:d0:ff:12:63: 6f:da:bb:95:1d:18:c1:5b:48:70:bb:f7:e1:f1:9f:21:db:ad: 83:2e:bd:7c:e5:c6:9b:32:07:77:8a:96:5f:c2:b4:37:15:ea: c7:1c:aa:3c:e2:d9:88:a0:ba:dd:c6:8e:27:15:cd:c0:68:d7: d8:1e:0b:a5:90:0a:05:44:32:dd:f7:b3:1d:b1:5b:d5:fd:fc: 17:7d:fd:16:c7:ed:11:c8:16:5b:cd:86:e4:0d:d1:cc:73:65: 9f:90:a9:b4:29:f3:93:17:0a:cd:a4:a6:91:35:59:f2:4f:b6: 38:ef:93:1c:53:fb:ed:90:77:51:35:6c:a9:d0:b6:de:7e:d5: f3:8a:d6:87:6e:19:18:af:fc:b1:4f:12:e8:2b:c7:11:6b:19: ec:b1:97:70:26:96:e9:58:b9:b2:4c:77:17:f2:0a:a5:5e:b3: 52:27:eb:ae:da:9b:af:a5:5c:47:67:9d:4b:45:33:0e:4d:39: 32:68:3a:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CrHmvfK5pMXqlIyOP7nuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NTYwOGQwNzhkNmYzMWNmNzliZTc4NzM2YmY4ODQ2MDZh MTdkYTQwHhcNMjUxMjA2MTkwMTUwWhcNMjUxMjA3MTkwMTUwWjAzMTEwLwYDVQQD Eyg2NjFiZmMxNWI3MDU4YjZlYzc2MGE1ZDNkZTcwMWYyNWQyNTBiNWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4JzG+BK18tKVOIQWcUEkYj8BAcV 4hzfbRc6MuBwh++d7WR2vnYdm2itkksV4bm6KHA2sz/mk5a6ee0+GuXh2IfTLIY3 HrqQGpbxMnnQ1l4fALlhpylX3QBuQGyOHuRsoFzBU3LHogyzlmFacHH4ZsoKWhf/ DVnM6Emdgj40G9gu3GsIdQjvx3s8nJPlLr4Ffcq9gX3S5R73SKE0Mxz47FjW56t5 4hi9AAiSI9FkZPeoLYXycanw2FH9SlQF6FZPBygBOW0dHyDUuuhmRIePC9CzRo55 u/SbMtBmGCaz0Zzk6ohwnr1T9TaRSxrWFPlPOlFZMHg5eKrZ8w3r8DBOrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYb/BW3BYtux2Cl095wHyXSULWiMB8GA1UdIwQY MBaAFDVWCNB41vMc95vnhza/iEYGoX2kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlZZSTBIalc4eHozbS1lSE5yLUlSZ2FoZmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iODQxOTUtY2Q0Ni00OWNiLTg1Zjgt NmViNDNiNTU2ZTEzLzEvTlZZSTBIalc4eHozbS1lSE5yLUlSZ2FoZmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iODQxOTUtY2Q0Ni00OWNiLTg1ZjgtNmViNDNiNTU2ZTEz LzEvTlZZSTBIalc4eHozbS1lSE5yLUlSZ2FoZmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4XKzZSN l7pKrByKpROJTh6HvH1P7mh5GBOfcveQXl0uBVZ1P1IdRvXjKBgft9uNE9ibPWq/ OM+kKotvi1XHCD/Obf/Q/xJjb9q7lR0YwVtIcLv34fGfIdutgy69fOXGmzIHd4qW X8K0NxXqxxyqPOLZiKC63caOJxXNwGjX2B4LpZAKBUQy3fezHbFb1f38F339Fsft EcgWW82G5A3RzHNln5CptCnzkxcKzaSmkTVZ8k+2OO+THFP77ZB3UTVsqdC23n7V 84rWh24ZGK/8sU8S6CvHEWsZ7LGXcCaW6Vi5skx3F/IKpV6zUifrrtqbr6VcR2ed S0UzDk05Mmg6bA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:06:01 2025 by rpki-client